3 ms·
At one point he says that he thinks it will take the black hats six months or so to figure out the exploit, but then, in the passage you have quoted, he gives w
by ScottBurson 13y ago
At one point he says that he thinks it will take the black hats six months or so to figure out the exploit, but then, in the passage you have quoted, he gives what sound (to my non expert ear) like fairly massive clues. Is it possible he has revealed too much?
- tptacek 13y agoWell, he's talking about it at Black Hat, right? Black Hat talks are usually full-disclosure.
- uxp 13y agoLooks like it. https://www.blackhat.com/us-13/briefings.html#Nohl https://www.blackhat.com/us-13/briefings.html#Nohl
- alx 13y agoHe'll be presenting the same subject at OHM on 03/08/2013 too: https://program.ohm2013.org/event/169.html https://program.ohm2013.org/event/169.html
- hondje 13y agoIts all about full disclosure for ethical reasons. Can't say that about them white hats.
- tptacek 13y agoI don't know what this comment means. Could you, or someone else, explain it? Who are the "white hats"? Why do they have different perspectives on full disclosure than other people? Who are those other people?
- RunningDroid 13y agoI think hondje's comment was intended to be sarcastic, for the rest see https://en.wikipedia.org/wiki/White_hat_(computer_security) https://en.wikipedia.org/wiki/White_hat_(computer_security)
- socillion 13y agoMaybe a riff on the burgeoning "green hat" practice of selling exploits instead of simply disclosing them, versus black hats releasing them publicly for free?
- fsck--off 13y agoI wouldn't have revealed that the second bug is a buffer overflow. The knowledge of the existence of a buffer overflow vulnerability on SIM cards is much more dangerous than knowledge of a buffer overflow on, say, a desktop O/S. Six months is a long time for a well funded organization to fuzz such a small piece of software. On a different note, I find it extremely frustrating that the community still has to deal with buffer overflow bugs in 2013. Hardware bounds checking architectures have existed for half a century, and SIM cards are a perfect example of special use devices that would benefit from this.
- revelation 13y agoThe buffer overflow is only accessible after you have broken the crypto stuff, no?